On October 21, 2026, Oracle published a security alert for CVE-2026-91403, identifying a critical vulnerability affecting Java SE and GraalVM. The vulnerability stems from the discovery of eight compromised certificate authorities (CAs) operated by eMudhra. Following the eMudhra intermediate CA…

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) gives attackers unauthenticated remote code execution in the PHP core. Details leaked before the scheduled patch, so defenders have no head start. PHP sits behind around 70% of websites, including corporate sites, customer portals, marketing pages,…